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ReCEIVED< FORWARDED to whom. Draw a line across column after each comment.) 


C/OPS/PTOS 
25X1 
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ie 
AC/TSD 3 o/ 8d Attached is latest edition 
fl _jof draft APEX manual. Please 
review and provide any 
comments to PPG via C/OPS/PTOY 
tInot later than 10 March 1980. 
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{1 MAR 1980 


MEMORANDUM FOR: Chief, Policy and Plans Group, OS 


FROM: Po 25 
Information Systems Security Group, OS 


SUBJECT: Review of APEX Manual[_| 25 


These are some informal comments on content and 
form. Many are based on general background knowledge 
rather than specific Information Systems Security Group 
(ISSG) items. Each comment is identified with the 
paragraph number: 


\ 


16C There should be a specific time for tracers 
to be sent. This will guide not only the contractor 
but also the responsible government officials.[ | 25 


26. Paragraph ends with a colon and has no ea / 
x1 elassification[ | PA 


38. 'This level of operational' on first line 
is in heavy print which is not consistent with 
at preceding and following paragraphs.[ 25 
oe? 
a” roe Although specific or approximate numbers 
h? ¢ have t been avoided there could be a problem over time. 
log "y Government security types rotate frequently and if x 
yl? . vr yw” there is a lack of documentation, the contractor 


ro- 4" of ws will proceed even if there might be a change in 
Veo" oon the scope of the contract. The small number of 
oD a gemployees for an R&D effort may increase to a larger 
ia wes *number for a production effort. [| 25 
fre “ at wv i ; P 
ae i & 49. May we assume that the SIO in our case is 
nv of pf # " Mr. Carlucci? I think that DCID 1/16 should be 
cited here also, e.g., 'In compliance with DCID 1/16 


and standard requirements, etc.' Also, change title of 
paragraph to Information Systems Security to reflect 


cognizance over these systems. 
Le ° 
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50. It doesn't seem clear what they mean by 
the 'Government official will arrange .... any Je 
required corrective measures.' It would seem 
that the contractor would be advised of the 
corrective measures that he had to have corrected. [| 


62/63. This is a little different from the past 
in the Agency anyway. OD&E used to require three 
wraps, with the ‘Government Property' label on the x 
outside, the finder of a lost document will not have 
to open it to the second wrap to find out that infor- 
nation.[ _~_] dg 

77. This paragraph has not been classified, but te 
shows a (7). Za 


80. The items mentioned must be accounted for by ioe 
some type of numbering system. They require accounting § 
but do not specify that an APEX number must be on the 
label. 


81. These should be subject to individual re 
accountability. There has been numbering and control 
in the past and should be continued. 


85. Each fiche should be subject to individual ta 
accountability similar to a pouch which may contain 

one or more SCI_documents but is controlled by a “eA 
pouch number. 


wey 


87. No classification on this paragraph ee 
Another (?).[ | We / 


95. This may be an impossible task for an ASO. 
Paragraph 17D lists one of the duties of the CASO as 
conducting security indoctrinating and debriefings. 
This seems to require some clarification. A111 
paragraphs but two have unclassified notations. 

The other two have question marks. The overall 
classification, however, is Confidential. 
Apparently they felt a compilation of_all para- 
graphs warranted the classification. 


51. There is only one 'c' in necessity. 


Approved For Release “RANE 2) C1 aa ic 
| Vi q i 


